Palo Alto Networks
Principal GRC Business Engineer
$168K–$271K
Office - USA - CA - Headquarters · No · Principal · Full-time · Posted Aug 18, 2026
- Experience
- 10+ years in Information Security or IT Risk, with at least 6+ years focused on GRC, security governance, and enterprise risk engineering in global environments.
- Education
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Management Information Systems, or equivalent practical experience.
- Visa sponsorship
- No work visa sponsorship.
About the job
Architects and matures global information security GRC programs by connecting security engineering, enterprise risk, and business operations through governance, risk assessment, reporting, and automation.
What you'll do
- Design global GRC frameworks and risk assessment methodologies aligned with enterprise goals and regulatory requirements.
- Lead security policy development, technical risk evaluations, and executive risk reporting.
- Implement and improve GRC platforms, automated workflows, policy-as-code, and continuous control testing.
What they ask for
- 10+ years in Information Security or IT Risk, including at least 6+ years focused on GRC, security governance, and enterprise risk engineering in global environments.
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Management Information Systems, or equivalent practical experience.
- Active CISSP, CRISC, CISM, or CISA certification.
- Hands-on GRC platform configuration and automation experience, plus experience across multi-cloud infrastructure (AWS, Azure, or GCP).
Nice to have
- Active CCSP or CIPP certification.
- Experience developing or assessing AI governance frameworks, such as NIST AI RMF or ISO 42001.
Pay
$167,600.00 - $271,150.00 USD/yr (base salary)
Tools
ISO 27001/2, NIST SP 800-53, NIST CSF, SOC 2 Type II, PCI-DSS, GDPR, AWS, Azure
AI focus
Use AI, automation, and continuous control monitoring to embed security into product, platform, and enterprise operations; preferred experience includes AI governance frameworks such as NIST AI RMF or ISO 42001.
Model-written summary · the original posting is authoritative